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APPENDIX 

IN THE CLAIMS: 

Please cancel claims 1 through 39. 
Please add the following claims: 

40. A system for transfer of secure data on a network comprising: 

a) a client capable of presenting conforming client data; 

b) a server capable of using said conforming client data to create at least one 
secure cookie, each of said at least one secure cookie including: 

i) a domain field capable of holding domain data to associate said secure 
cookie to a domain where said secure cookie is valid; 

ii) at least one name field capable of holding name data; 

iii) at least one value field capable of holding value data derived from said 
conforming client data; and 

iv) an expiration field capable of holding cookie expiration data; 

c) a network capable of transporting at least one of said at least one secure cookie 
between said server and said client; 

d) a client storage means capable of storing at least one of said at least one secure 
cookie; and 

e) a secure attribute service between said client and said server using said at least 
one of said at least one secure cookie. 
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41. A system according to claim Error! Reference source not found., wherein said 
client is a web browser. 

42. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie is an authentication cookie. 

43. A system according to claim Error! Reference source not found., wherein said 
secure attribute service includes said server authenticating said client by comparing 
said conforming client data with said value data. 

44. A system according to claim Error! Reference source not found., wherein said 
authentication cookie is an IP cookie and said conforming client data includes the IP 
address of said client. 

45. A system according to claim Error! Reference source not found., wherein said 
authentication cookie is a password cookie and said conforming client data includes 
a password. 

46. A system according to claim Error! Reference source not found., wherein said 
password is processed using a hashing algorithm. 

47. A system according to claim Error! Reference source not found., wherein said 
password is processed using an encryption algorithm. 



15 



Serial No. 09/451,090 



48. A system according to claim Error! Reference source not found., wherein said 
authentication cookie is a sign cookie and said conforming client data includes a 
digital signature on a timestamp. 

49. A system according to claim Error! Reference source not found., further including 
a secret-key based authentication service. 

50. A system according to claim Error! Reference source not found., and wherein said 
authentication cookie is a KT cookie and said conforming client data includes a 
Kerberos ticket created using a Kerberos protocol. 

51 .A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie includes a multitude of secure cookies. 

52. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie is a seal cookie capable of being used by said 
server to determine if another cookie in said multitude of secure cookies has been 
altered. 

53. A system according to claim Error! Reference source not found., wherein said 
seal cookie includes an integrity check value. 
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54. A system according to claim Error! Reference source not found., wherein said 
seal cookie includes the signature of a message digest signed using a private key. 

55. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one name field and at least one of said at least one value field 
are a pair. 

56. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie further includes a flag, said flag specifying 
whether all machines within said domain referenced by said domain data can access 
said value data. 

57. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie is a key cookie containing an encrypted 
session key, said session key capable of encrypting said value data contained in 
another of said at least one secure cookie. 

58. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie is used in an electronic transaction. 

59. A system according to claim Error! Reference source not found., wherein said 
system is part of a role based access control system and at least one of said at least 
one secure cookie is used in assigning client roles. 
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60. A method for the transfer of secure data on a network including the steps of: 

a) a client making a request from a server; 

b) said server retrieving conforming client data; 

c) said server creating at least one secure cookie, each of said at least one secure 
cookie including selected conforming client data, said selected conforming data 
including at least some of said conforming client data; 

d) said server transmitting at least one of said at least one secure cookie to said 
client; 

e) said client storing at least one of said at least one secure cookie; 

f) said client presenting to a related server at least one of said stored at least one 
secure cookie with a second request, said related server residing on the same 
domain as said server; 

g) said related server making a determination of whether at least one of said at 
least one retrieved stored at least one secure cookie contains said selected 
conforming client data; and 

h) said related server fulfilling said second request if said determination is positive. 

61 .A method of claim Error! Reference source not found, wherein at least some of 
said conforming client data is retrieved from said client. 

62. A method of claim Error! Reference source not found., wherein said conforming 
client data includes a client's IP address. 



18 



Serial No. 09/451,090 



63. A method of claim Error! Reference source not found., wherein said conforming 
client data includes a password. 

64. A method of claim Error! Reference source not found., wherein said conforming 
client data includes a Kerberos ticket. 

65. A method of claim Error! Reference source not found., wherein said conforming 
client data includes a digital signature. 

66. A method of claim Error! Reference source not found., wherein said determination 
further includes verifying that said digital signature belongs to said client. 

67. A method of claim Error! Reference source not found., further including the step 
of said server encrypting at least some of said selected conforming client data. 

68. A method of claim Error! Reference source not found., wherein said encrypting 
uses a public key. 

69. A method of claim Error! Reference source not found., wherein said encrypting 
uses a secret key. 
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70. A method of claim Error! Reference source not found., further including the step 
of said server decrypting said encrypted selected conforming client data using a 
private key. 

71 .A method of claim Error! Reference source not found., further including the step 
of said server decrypting said encrypted selected conforming client data using a 
secret key. 

72. A method of claim Error! Reference source not found., further including the step 
of said server hashing at least some of said conforming client data. 

73. A method of claim Error! Reference source not found., wherein said conforming 
client data includes data derived from at least one item from the group consisting of: 

a) the client's IP address; 

b) a password; 

c) a Kerberos ticket; 

d) credit card data; 

e) social security number; 

f) a digital signature of the client; and 

g) a home address. 

74. A method of claim Error! Reference source not found., wherein said determination 
is positive only if said selected conforming client data was retrieved by said server 
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from said client during the current session. 

75. A method of claim Error! Reference source not found., wherein said secure 
cookie contains a digital signature of said client on a time-stamp. 

76. A method of claim Error! Reference source not found., further including the step 
of providing integrity to at least one of said at least one secure cookie comprising: 

a) said server creating integrity data from at least one of said at least one secure 
cookie, said integrity data including at least one item selected from the group: 

i) encrypted said selected conforming client data; 

ii) a digital signature; and 

iii) a message digest; 

b) said server inputting said integrity data into a seal cookie; and 

c) said server storing said seal cookie. 

77. A method of claim Error! Reference source not found., wherein said request is 
part of an electronic transaction. 

78. A method of claim Error! Reference source not found., wherein said request is 
part of an attribute-based access control function. 
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